Merge pull request #272 from Huang-Wei/helm-sa-rbac

install: create a RoleBinding for obtain delegated authentication
kubernetes-sigs · Jan 11, 2022 · 7b3182b · 7b3182b
2 parents 5f63e9c + 04334eb
commit 7b3182b
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/manifests/install/charts/as-a-second-scheduler/templates/rbac.yaml b/manifests/install/charts/as-a-second-scheduler/templates/rbac.yaml
@@ -97,4 +97,21 @@ roleRef:
   kind: ClusterRole
   name: scheduler-plugins-controller
   apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: sched-plugins::extension-apiserver-authentication-reader
+  namespace: kube-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: extension-apiserver-authentication-reader
+subjects:
+- kind: ServiceAccount
+  name: {{ .Values.scheduler.name }}
+  namespace: {{ .Values.scheduler.namespace }}
+- kind: ServiceAccount
+  name: {{ .Values.controller.name }}
+  namespace: {{ .Values.controller.namespace }}